CVE-2013-1969

CVE-2013-1969 describes multiple use-after-free vulnerabilities within libxml2 version 2.9.0 and potentially other versions. These flaws, specifically in the htmlParseChunk and xmldecl_done functions, could lead to a denial of service (crash) and potentially arbitrary code execution due to issues like a buffer overflow in xmlBufGetInputBase. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated attackers to exploit it over a network with low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and it has received no community discussion or media coverage.